Avast File Reputation Blocking Anniversary Update File

[Omnipotent]

It looks like a legitimate process, but it won't let me not abort the connection. Any help? I may have disabled a vital windows process.

 

[Omnipotent]

Can someone edit the imgur link text, not sure how to do that

 

[DJ Panda]

The link is working. I have had this popup many times where it says "Abort Connection" click on the v arrow. Then it should give you the option to "Complete the Download".

 

[Omnipotent]

The link is working. I have had this popup many times where it says "Abort Connection" click on the v arrow. Then it should give you the option to "Complete the Download".

Yeah, the problem is avast wont let me complete the download.

 

[Wave]

There is nothing wrong, it is nothing but an honest Windows Update!
I am not a user of avast! products but is there not an option to allow the connection (where the drop-down is to select the action to take)? You can try white-listing the svchost.exe process manually in the settings.

Avast did not detect the svchost.exe (it's a legitimate Windows process in this case..) as malicious but it alerted about the connection the process has because the downloads are not whitelisted by Avast yet... since it is a new Windows Update the file rep picks it up as suspicious

edit: sorry only just read the replies... just try to whitelist the svchost.exe process manually and see if that stops the alerts/block

 

[Ink]

Can someone edit the imgur link text, not sure how to do that

Add the i. before *imgur.com/bzvfP3* and .png after.

It looks like a legitimate process, but it won't let me not abort the connection. Any help? I may have disabled a vital windows process.

I had a similar issue with Avast in 2014. Click the drop-down to see other options.

 

[Andytay70]

Avast seems to be doing this with a lot of legit software at the moment.

 

[DJ Panda]

Avast seems to be doing this with a lot of legit software at the moment.

Sounds like to me the user is using the maximum protection guide. Which can give some FP. Better safe than sorry though.

 

[Andytay70]

Sounds like to me the user is using the maximum protection guide. Which can give some FP. Better safe than sorry though.

I am

 

[Pat MacKnife]

For better help go to Avast! forum

https://forum.avast.com/index.php?board=2.0

 

[Intel_iRIS81]

I'm more of a Windows/Android software guru than I am security. I advise you in that tiny span of downloading to disable your AV for that download. Its only gonna be for a minute or so. At least whitelist it. Turn off everything and use Defender during the download if you have too. I advise everyone going to this update to do a clean install. Backup everything and go about the install that way. This isn't a regular update. Its really a new OS upgrade and I've been on this newest final release about a week now from the windows insider program and loving it but they changed a lot internally. Not sure what route you went about downloading it but I would use a bootable usb and use either Rufus or Media creation tool.

 

[DJ Panda]

I'm more of a Windows/Android software guru than I am security. I advise you in that tiny span of downloading to disable your AV for that download. Its only gonna be for a minute or so. At least whitelist it. Turn off everything and use Defender during the download if you have too. I advise everyone going to this update to do a clean install. Backup everything and go about the install that way. This isn't a regular update. Its really a new OS upgrade and I've been on this newest final release about a week now from the windows insider program and loving it but they changed a lot internally. Not sure what route you went about downloading it but I would use a bootable usb and use either Rufus or Media creation tool.

Making a backup is always a good idea even when doing an upgrade. As for disabling an AV isn't really needed. If it is detected you can always exclude the update and move on. I am fairly sure that the user was only notified due to having Avasts swettings tweaked.

 

[hjlbx]

Avast is smart...

Windows 10 Anniversary Update = malware

 

[Ink]

Avast File Rep flags Windows Defender definition updates, on Windows 10 AU. @xCharbz See below, it's related to Windows Defender - not the Anniversary Update.

 

[Omnipotent]

Avast File Rep flags Windows Defender definition updates, on Windows 10 AU. @xCharbz See below, it's related to Windows Defender - not the Anniversary Update.

View attachment 113136

That seems sketchy.

 

[Ink]

That seems sketchy.

In what way?

Remember that not many users will be running Avast and Windows Defender on an OS prior to Windows 10 AU. Limited Periodic Scanning allows Windows Defender to update, whilst another AV is active.

I don't see anything sketchy about this.

 

[Omnipotent]

In what way?

Remember that not many users will be running Avast and Windows Defender on an OS prior to Windows 10 AU. Limited Periodic Scanning allows Windows Defender to update, whilst another AV is active.

I don't see anything sketchy about this.

It just seems unusual that Avast would flag something being downloaded from the system32 folder itself. Even though it is a very new file, it should know that it's safe.

 

[Ink]

Even though it is a very new file, it should know that it's safe.

It's not signed and a new file.
File Reputation Warning - Windows Update in URL

The filerep warning is a automated system.
I don't know the exact numbers, but lets say the first 100.000 avast users get to see the warning.
If you are avast user number 100.001 that downloads the update(s), you will not get the warning since the system now doesn't see it as a rare (and therefore potentially suspicious) file anymore.

In theory it can be that only the first user gets the warning, but avast has to add the file(s) to the whitelist so it will not trigger the warning anymore.

Note :
This is just a simple explanation on how the filerep warning works.
No use of making it difficult so only a few people understand what I say, right

 

[Omnipotent]

It's not signed and a new file.
File Reputation Warning - Windows Update in URL

Oh, in that case Avast warned you about an unsigned file, didn't realise that.

 

[Aura]

Not the first time I've seen avast! flagging Windows Update-related files.